mirrors/youlai-mall
1
0
Fork 0
mirror of https://gitee.com/youlaitech/youlai-mall.git synced 2025-01-04 01:52:21 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(GatewaySecurityFilter.java): 线上访问限制错误问题修复

Browse Source
This commit is contained in:
郝先瑞 2022-05-22 17:02:40 +08:00
parent 3b2a207956
commit ae4cf68644
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
youlai-gateway/src/main/java/com/youlai/gateway/filter/GatewaySecurityFilter.java
View File

@ -56,13 +56,13 @@ public class GatewaySecurityFilter implements GlobalFilter, Ordered {
String methodValue = request.getMethodValue();
if (SecurityConstants.PROD_FORBID_METHODS.contains(methodValue)) { // PUT和DELETE方法禁止
// 是否需要放行的请求路径
boolean isPermitPath = SecurityConstants.PROD_PERMIT_PATHS.stream().anyMatch(permitPath -> requestPath.contains(permitPath));
boolean isPermitPath = SecurityConstants.PROD_PERMIT_PATHS.stream().anyMatch(permitPath -> permitPath.contains(requestPath));
if (!isPermitPath) {
return ResponseUtils.writeErrorInfo(response, ResultCode.FORBIDDEN_OPERATION);
}
} else {
// 是否禁止放行的请求路径
boolean isForbidPath = SecurityConstants.PROD_FORBID_PATHS.stream().anyMatch(permitPath -> requestPath.contains(permitPath));
boolean isForbidPath = SecurityConstants.PROD_FORBID_PATHS.stream().anyMatch(permitPath -> permitPath.contains(requestPath));
if (isForbidPath) {
return ResponseUtils.writeErrorInfo(response, ResultCode.FORBIDDEN_OPERATION);
}